A vulnerability was found in parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel mishandles a short descriptor, leading to out-of-bounds memory access. Reference: https://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound.git/commit/?id=daac07156b330b18eb5071aec4b3ddca1c377f2c https://lore.kernel.org/lkml/20190814023625.21683-1-benquike@gmail.com/
Created kernel tracking bugs for this issue: Affects: fedora-all [bug 1746770]
This was fixed for Fedora with the 5.2.10 stable update.
Mitigation: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.